IN THE CLAIMS 

This listing of the claim will replace all prior versions and listings of 
claim in the present application. 
Listing of Claims 

Claims 1-22 (canceled). 

23. (currently amended)A public-key cryptographic method 
implemented in a computer system scheme c omprising: 
a key generation step of generating a secret-key: 

• Xli ^2, 2/11,2/12, 2/21, J/22, * 6 Z q 

and a public-key: 

• G>G' : finite (multiplicative) group G QG t 

• q : prime number (the order of G) 

• 9u 92 e G 

•c = 9i x *92 X2 , rfl = 9l yil 92 yi2 > d 2 = 9l V2l 92 y "> h = 9l z y 

• 7r : X\ x X2 x M — > G' : one-to-one mapping 

• 7T" 1 : Im(7r) — > X x x X 2 x M 

where the group G is a partial group of the group G\ X, and X 2 are an infinite 
set of positive integers which satisfy: 

ot\\\a 2 < q (Vai € X\ % Va 2 € X 2 ) 

where M is a plaintext space; 

a ciphertext generation and transmission step of selecting random 
numbers CheXi, a 2 e><2, r e Zq for a plaintext m (m e M), calculating: 

u x = <?i r , u 2 = 9 2 r , e = 7r(ai,a 2 ,m)/i r , v = pi Ql c r d 1 Qr d 2 mr 

where a = ai || a 2 , and transmitting (ui, u 2 , e, v) as a ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
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received ciphertext and by using the secret key, a'i, a' 2 , m' (a'ieXi, a' 2 eX2, 
m'eM) which satisfy: 

7r(ai,a2,m') = e/u x z 

and if the following is satisfied: 

outputting m' as the deciphered results (where a' = a'i || a' 2 ), whereas if not 
satisfied, outputting as the decipher results the effect that the received 
ciphertext is rejected. 

24. (currently amended)A public-key cryptographic method 
implemented in a computer svstem sch e m e comprising: 
a key generation step of generating a secret-key: 

• Xi,X 2 , 2/11, 2/12,2/21, 2/22,2 e Z q 

and a public-key: 

• V> Q '■ prime number (q is a prime factor of p-1 ) 

• 01,02 € Z p : ordp(si) = ord p (£ 2 ) = q 

m c = gi xl g2 X2 niod p, d\ = yi yil £ 2 Vl3 mod p, d 2 = 9\ V21 92 V32 mod p, h = g\ z mod p, 

• k u k 2l k 3 : positive constant (I0 fcl +* 3 < g, 10*3 < <?, 10* l +* 2+fc3 < p) 

a ciphertext generation and transmission step of selecting random 
numbers a = cm || a 2 (|ch| = ki, |a 2 | = k 2 ) for a plaintext m (|m| = k 3 , where |x| is 
atbe-number of digits of x), calculating: 

m = a\\K 
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selecting a random number reZq, calculating: 

ui = gi r mod p, U2 = 92 r mod p, e = m h r mod p, u = <?i Ql c r di ar d2 mr mod p 

and transmitting (ui, U2, e, v) as a ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key, a'i, a' 2 , m 1 (|a'i| = ki, |a' 2 | = k 2 , 
|m'| = k3) which satisfy: 

a ill a 2ll m ' — modp 

and if the following is satisfied: 

Pi a ini xl+a ' yil+m ' wl U2 X3+a ' vl3+m/v22 = v (mod p) 

outputting nrT as the deciphered results (where a' = a'i || a^), whereas if not 
satisfied, outputting as the decipher results the effect that the received 
ciphertext is rejected. 

25. (currently amended) A public-key cryptographic method scheme 
according to claim 4-23, wherein the public-key is generated by a receiver and 
is made public. 

26. (currently amended)A public-key cryptographic sch e m e method 
according to claim +23, wherein in said ciphertext transmission step, the 
random numbers cheXi, a 2 eX 2 and r e Zq are selected beforehand and the 
following is calculated and stored beforehand: 
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27. (currently amended)A public-key cryptographic method schomo 
according to claim 224, wherein in said ciphertext transmission step, the 
random numbers cm, a 2 (|ai| = k 1f |a 2 | = k 2 ), and reZq are selected beforehand 
and the following is calculated and stored beforehand: 

u\ = g\ r mod p, u 2 = g 2 mod p, h r mod p, gi ai c r di ar mod p 



28. (currently amended)A cryptographic communication method 
implemented in a computer system comprising: 

a key generation step of generating a secret-key: 

• xi > x 2 ,yii,yi2,2A2i,y22,^ € Z g 

.» 

and a public-key: 

• G t G f : finite (multiplicative) group G QG* 

• q : prime number (the order of G) 

• 9i,92 6 G 

• c = gi Xl 92 X2 , di = gi Vll g 2 yi2 , d 2 = gi V2X 92 V2 \ h = 

• 7T : x x M — )- G 7 : one-to-one mapping 

• 7T" 1 : Im(7r) — ► X x x X 2 x M 

• E : symmetric encipher function 

where the group G is a partial group of the group G', Xi and X 2 are an infinite 
set of positive integers which satisfy: 

ai||a 2 < q (Vai € X Xj Va 2 6 X 2 ) 

where M is a key space; 

a ciphertext generation and transmission step of selecting random 
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numbers cheXi, a 2 eX2, reZq for key data K (K e M), calculating: 

ui = 9i r , u 2 = p 2 r , e = *{a u a2 9 K)h r 9 v = g^c'd^d*** 
where a = ai || a 2 , generating a ciphertext C of transmission data m by: 

C = E K (m) 

by using a (symmetric cryptographic function E and key data K, and 
transmitting (ui, u 2 , e, v, C) as the ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key, a'i, a' 2 , K' (a'i e Xi, a 2 eX 2 , 
K'eM) which satisfy: 

and if the following is satisfied: 

where a 1 = a'i || a 2 

executing a decipher process by: 

m = D K ,{C) 

outputting deciphered results, whereas if not satisfied, outputting as the 
decipher results the effect that the received ciphertext is rejected. 

29. (currently amended)A cryptographic communication method 
according to claim 628, wherein the ciphertext C is generated by: 
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C = E K (f(a l ,a 2 )\\m) 

by using a symmetric cryptographic function E, the key data K and a 
publicized proper function f, it is checked whether the following is satisfied: 

f(a' x ,a' 2 ) = [D K ,(C)] k 

where f outputs a value of k bits and [x] k indicates the upper k bits of x, and if 
the check passes, a decipher process is executed by: 

m=[D K ,(C)]- k 

where [x]' k indicates a bit train with the upper k bits of x being removed. 

30. (currently amended) A cryptographic communication method 
implemented in a computer system comprising: 

a key generation step of generating a secret-key: 

• £i,x2,yu,yi2>y2i>y22»2 e %<i 

and a public-key: 

• Pi Q : prime number (q is a prime factor of p-1) 

• g Xy g 2 e Z p : ordpfai) = oid p (g 2 ) = q 

m c = gi Xl g 2 X2 mod p, d\ = gi yil g2 Vl2 modp, d 2 = gi V2l g2 V22 mod p, h = modp, 

• k u k 2l k 3 : positive constant (10* 1 +* 3 < g, 10* 3 < q, 10 fcl +* 3+ * 3 < p) 

• E : symmetric encipher function 

a ciphertext generation and transmission step of selecting random 
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numbers a = cm || a 2 (|ai| = ki, |a 2 | = te) for key data K (|K| = k3 A where |x| is a 
tbe-number of digits of x), calculating: 

m =a\\K 

selecting a random number r e Zq, calculating: 

u\ = gi r mod p, U2 — 92 r mod p, e = m h r mod p, v ~ gi ai c r dx <xr d2 Kr mod p 

and generating a ciphertext C of transmission data by: 

C = E K (m) 

by using a (symmetric) cryptographic function E and the key data K, and 
transmitting (ui, u 2 , e, v, C) as the ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key, a'i, a' 2 , K' (|a'i| = ki, |a' 2 | = te, 
|K'| = k3> which satisfy: 

and if the following is satisfied: 

5i a ' l wi Xl+a,Vll+ ^ ,y21 U2 X2+a/vi2+iC,V22 = v (mod p) 

where a' = a'i || a' 2 , 

executing a decipher process by: 

m = D K >(C) 

outputting deciphered results, whereas if not satisfied, outputting as the 
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decipher results the effect that the received ciphertext is rejected. 

31. (currently amended) A cryptographic communication method 
according to claim 830, wherein the ciphertext C is generated by: 

C = E K (f(*ua 2 )\\m) 

by using a symmetric cryptographic function E, the key data K and a 
publicized proper function f, it is checked whether the following is satisfied: 

^i a iui xl+a ' 1/ll " , " /< " 1/3l U2 X3+ot ' yi2+i<r/v3a = v (mod p), 

where f outputs a value of k bits and [x] k indicates the upper k bits of x, and if 
the check passes, a decipher process is executed by: 

m = [D K ,(C)r k 

where [x]" k indicates a bit train with the upper k bits of x being removed. 

32. (currently amended)A cryptographic communication method 
according to claim 628, wherein the public-key is generated by a receiver and 
is made public. 

33. (currently amended)A cryptographic communication method 
according to claim ©28, wherein in said ciphertext transmission step, the 
random numbers ch, a 2 (a ie Xi, a 2 eX 2 ) and r e Zq are selected beforehand and 
the following is calculated and stored beforehand: 
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u\ = gi, u 2 = 92 r , h r , gi ai c r di 



34. (currently amended)A cryptographic communication method 
according to claim 628, wherein in said ciphertext transmission step, the 
random numbers gh, a 2 (|ai| = |a 2 | = k 2 ) and r e Zq are selected beforehand 
and the following is calculated and stored beforehand: 

ui = gi r mod p, v>2 = 9<i mod p, h r mod p, 9i ai c r di ar mod p 

35. (currently amended)A cryptographic communication method 
implemented in a computer system comprising: 

a key generation step of generating a secret-key: 

• ^1,^2,2/1,2/2,2 € z g 

and a public-key: 

• G y G' : finite (multiplicative) group G C G' 

• q : prime number (the order of G) 

• 9i,92 € G 

• c = 9i Xl 92 X2 > d = ^i Vi P2 w , /> = <7i z , 

• 7r : Ai x X2 x Af — ► Dom(E) : one-to-one mapping 

(Dom(E) is the domain of the function E) 

• 7T' 1 : Im(7r) — > Xi x X 2 x M 

• : hash function 

• J5 1 : symmetric encipher function 

where the group G is a partial group of the group G\ Xi and X 2 are an infinite 
set of positive integers which satisfy: 
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a ciphertext generation and transmission step of selecting random 
numbers CheXi, a 2 eX 2 , r eZq, calculating: 

ui = <?i r , w 2 = P2 r , t; = ^i Ql c r cP r , K = H(h r ) 
where a = ai || a 2 , generating a ciphertext C of transmission data m by 

C = JE?ic(7r(ai, a 2 ,m)) 

by using a (symmetric) cryptographic function E; and transmitting (ui, u 2 , v, C) 
as the ciphertext; and 

a ciphertext reception and decipher step of calculating: 

K' = H{ Ul z ) 

by using the secret key, calculating from the received ciphertext, aS, a' 2 
(where a'ieXi a' 2 eX 2 ) which satisfy: 

ir(ai f o£,m') = D K ,(C) 
if the following is satisfied: 

where a' = a'i || a' 2 

outputting m* as the deciphered results, whereas if not satisfied, outputting as 
the decipher results the effect that the received ciphertext is rejected. 
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36. (currently amended)A cryptographic communication method 
implemented in a computer system comprising: 

a key generation step of generating a secret-key: 

and a public-key: 

• P> Q prime number (q is a prime factor of p- 1 ) 
•9u92eZ p : OTd p (gi) = ord p (p2) = q 

• c — gi Xl g2 X2 mod p, d = g\ yi g2 V2 mod p, h — g\ z mod p, 

• *i,fc2,*3 : positive constant (lO* 1 ** 2 < g, 10* 3 < g, 10 fcl+/e2+fc3 < p) 

• if : hash function 

• E : symmetric encipher function (the domain of E is all positive integers) 

a ciphertext generation and transmission step of selecting random 
numbers a = ch || a 2 (|ai| = ki, |a 2 | = k 2 , where (|x| is the number of digits of x), 
selecting a random number r e Zq, calculating: 

ui = g\ r mod p, U2 = g*? mod p, v = gi ai c r d? r mod p, K = H(h r mod p) 

transmitting the ciphertext (ui, u 2 , v, C); generating a ciphertext C of 
transmission data m by: 

C = E K (ai\\a 2 \\m) 

by using a (symmetric) cryptographic function, and transmitting (ui, u 2 , v, C) 
as the ciphertext; and 

a ciphertext reception and decipher step of calculating: 

K 1 = H(ui z mod p) 
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by using the secret key, calculating from the received ciphertext, aS, a' 2 (|a # i | 
= ki, |a' 2 | = k 2 ) which satisfy: 

a'MUm' = D K ,{C) 

and if the following is satisfied: 

pi a iui Xl+ ° /yi U2 X3+a/va = v (mod p) 

outputting m' as the deciphered results (where a' = a'i || a 2 ), whereas if not 
satisfied, outputting as the decipher results the effect that the received 
ciphertext is rejected. 

37. (currently amended)A cryptographic communication method 
according to claim 4335. wherein the public-key is generated by a receiver 
and is made public. 

38. (currently amended)A cryptographic communication method 
according to claim +335, wherein in said ciphertext transmission step, the 
random numbers ch, a 2 (aieXi, a 2e X 2 ) and r e Zq are selected beforehand and 
the Ui, u 2l e and v are calculated and stored beforehand. 

39. (currently amended) A cryptographic communication method 
according to claim 4436, wherein in said ciphertext transmission step, the 
random numbers cm, a 2 (|ch| = ki, |a 2 | = k 2 ), and r e Zq are selected beforehand 
and the Ui, u 2 , e and v are calculated and stored beforehand. 
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40. (currently amended)A cryptographic communication 
implemented in a computer system comprising: 

a key generation step of generating a secret-key: 



method 



• sk : (asymmetric cryptography) decipher key 

and a public-key: 



• G : finite (multiplicative) group 

• q : prime number (the order of G) 

•9i,92 e G 

• tv:XixX 2 xM — ► Dom(£?) : one-to-one mapping . 

(Dom(E) is the domain of the function E) 

• 7T- 1 : Im(7r) — ^ixX 2 xM 

• ^pfc(') : (asymmetric cryptography) encipher function 



where the group G is a partial group of the group G\ X^ and X 2 are an infinite 
set of positive integers which satisfy: 

<*i||a2 < q (Vai € X\, Va 2 e X 2 ) 

where M is a plaintext space; 

a ciphertext generation and transmission step of selecting random 
numbers CHeXi, a 2 eX 2 , r e Zq, calculating: 

where a = ai || a 2 , generating a ciphertext C of transmission data m by: 

e = E pk (7r(aua 2 ,m)) 
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by using an (asymmetric) cryptographic function E P k, and transmitting (ui, U2, 
e, v) as the ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key, a'i, 0*2, nrV (a'ieXi, a' 2 eX2, 
m'eM) which satisfy: 

7r(ai> a 2> m ') = D 9k (e) 

and if the following is satisfied: 

0i a ' l ui xl+Q ' vl u2 X3 + Q/V2 = v 

where: 

outputting m* as the deciphered results, whereas if not satisfied, outputting as 
the decipher results the effect that the received ciphertext is rejected. 



41. (currently amended)A cryptographic communication method 
implemented in a computer system comprising: 

a key generation step of generating a secret-key: 

• XI, X 2 , 2/1, 2/2 € Z q 

• sk : (asymmetric cryptography) 

decipher key 

and a public-key: 



• Pi Q : prime number (q is a prime factor of p- 1 ) 

• gi,Q2 € Zp : ordp(^i) = ordp^) = q 

• c = gi Xl g2 X2 mod p, d = g\ vl g2 V2 mod p, 

• ki y k 2 : positive constant (I0* l+fca < q) 

• E p k(-) : (asymmetric cryptography) encipher function 

(the domain is all positive integers) 



a ciphertext generation and transmission step of selecting random 
numbers a = cm || a 2 (|ai| = ki, |a 2 | = te, where |x| is the number of digits of x), 
selecting a random number r e Zq, calculating: 

ui = <?i r mod p, U2 = Q2 r mod p, v = g\ ctl c r cP ir mod p 

generating a ciphertext C of transmission data m (positive integer) by: 

e = ^ P ib(ai||a2||m) 

by using the secret key, and transmitting (ui, u 2 , e, v) as the ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key, a^, a' 2> m' (|a'i| = ki, |a' 2 | = k 2 , 
m' is a positive integer) which satisfy: 

ai||ai||m'=D, fc (e) 
and if the following is satisfied: 

5i a' lui x 1+ «'y lti2 x 2 +a'y2 = y ( mod p)j 

where: 

a' = ailla^ 

outputting m' as the deciphered results, whereas if not satisfied, outputting as 
the decipher results the effect that the received ciphertext is rejected. 

42. (currently amended)A cryptographic communication method 
according to claim +840, wherein the public-key is generated by a receiver 
and is made public. 
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43. (currently amended)A cryptographic communication method 
according to claim 4840, wherein in said ciphertext transmission step, the 
random numbers ch, a 2 (cheXi, a 2 eX2) and reZq are selected beforehand and 
the ui, u 2 and v are calculated and stored beforehand. 

44. (currently amended)A cryptographic communication method 
according to claim +941_, wherein in said ciphertext transmission step, the 
random numbers Ch, a 2 (|ai| = k 1f |a 2 | = k 2 ), and reZq are selected beforehand 
and the ui, u 2 and v are calculated and stored beforehand. 
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